$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38778.roa File: AS38778.roa (raw, json) Hash identifier: TAeqmNlYHkj7/o5UfyYPI/sBMb4BbTQnUsDwJNUSanQ= Subject key identifier: EA:D1:6F:F8:07:B9:3E:CE:E8:52:DD:00:1F:61:A3:90:81:24:10:FC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20ECA2651D7D2E6476444D480B837708F7562AF4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38778.roa Signing time: Sat 02 May 2026 21:36:45 +0000 ROA not before: Sat 02 May 2026 21:31:45 +0000 ROA not after: Sat 01 May 2027 21:36:45 +0000 asID: 38778 IP address blocks: 2407:f900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ec:a2:65:1d:7d:2e:64:76:44:4d:48:0b:83:77:08:f7:56:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:45 2026 GMT Not After : May 1 21:36:45 2027 GMT Subject: CN=EAD16FF807B93ECEE852DD001F61A390812410FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:9a:57:0b:60:ef:3c:2d:e6:57:4e:48:17: c7:b5:a7:56:6a:da:4e:f7:7b:fd:14:21:a4:81:6a: 2a:d0:8b:1c:1e:f6:a4:f5:44:fd:f3:6c:2b:5f:77: 77:48:67:57:2c:85:c9:94:5c:81:9e:f1:76:ce:cd: 0f:bf:4e:bd:f9:ad:f6:68:35:a3:38:c5:a1:d2:ce: e7:48:43:a1:76:25:fe:09:0a:c7:b6:b8:c9:69:86: 75:b6:f7:89:91:08:8e:9b:ca:91:e7:74:ac:ff:11: 64:ff:ee:ff:93:58:1c:38:f5:fc:a5:a7:6b:d1:9a: 1b:88:41:6c:c8:1f:c3:81:4a:26:69:d5:27:1f:d6: 57:33:b1:5b:c2:87:1e:0d:25:77:e6:d9:38:3e:0b: d8:85:f6:85:73:59:f0:89:47:1e:d6:44:80:a2:30: 7e:16:99:c9:ac:7a:17:f5:26:db:4d:03:d4:a1:56: cd:29:04:34:25:08:7a:23:fa:c4:35:47:45:13:53: 28:0d:4c:1a:6f:43:99:9d:7d:8c:f9:da:5d:9a:01: d7:1b:f1:69:bd:9b:b8:20:75:3c:96:86:2d:e8:b6: 1f:a5:1e:75:5f:21:07:32:16:1f:2e:28:f8:64:6c: 8b:c3:4e:6d:9d:10:0a:88:54:cd:e1:be:d9:61:f9: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D1:6F:F8:07:B9:3E:CE:E8:52:DD:00:1F:61:A3:90:81:24:10:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:f900::/32 Signature Algorithm: sha256WithRSAEncryption 78:bb:c9:3c:a6:b2:77:20:7c:01:f9:7f:73:d5:4b:b1:0c:0a: d3:29:96:6a:37:a3:a9:69:38:51:a1:8f:9a:6f:46:fe:54:dd: 70:64:ee:94:c3:37:af:51:19:da:4d:26:47:3f:be:b0:a7:d6: fb:5a:92:f3:76:c3:20:c9:e1:72:0d:93:2a:ac:c0:f9:40:98: 12:b6:82:b8:db:56:60:cb:2b:e8:94:28:09:0d:3d:4b:e6:93: fd:1c:6e:db:4e:c1:e5:69:1c:58:c1:9d:ef:85:5d:11:01:d7: 92:ed:4a:e3:b9:df:c5:32:d1:30:a8:10:c2:23:79:9f:ac:b0: fd:d5:51:af:5b:9a:6c:e5:a8:da:3e:0c:c4:8d:50:d7:a3:ae: 68:88:46:2f:67:b0:a6:a7:3b:00:95:68:98:4e:05:f8:fe:ed: e3:78:be:0a:89:af:ae:48:4e:2e:9b:07:65:b2:b9:ad:db:fa: 56:07:00:73:a2:92:f8:c6:87:c1:41:5c:a8:26:13:d1:21:f7: a2:83:cf:9d:28:0a:69:2c:ab:10:d0:6d:96:85:34:3a:8b:15: 1d:16:f9:3c:93:40:cf:4c:b0:c7:60:8c:64:d3:b9:06:9c:a1: 69:70:b4:d2:70:c7:d0:db:90:cf:cb:0b:28:fc:b2:ff:76:cf: 0a:4a:a6:7d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIOyiZR19LmR2RE1IC4N3CPdWKvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzE0NVoX DTI3MDUwMTIxMzY0NVowMzExMC8GA1UEAxMoRUFEMTZGRjgwN0I5M0VDRUU4NTJE RDAwMUY2MUEzOTA4MTI0MTBGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbEmlcLYO88LeZXTkgXx7WnVmraTvd7/RQhpIFqKtCLHB72pPVE/fNsK193 d0hnVyyFyZRcgZ7xds7ND79Ovfmt9mg1ozjFodLO50hDoXYl/gkKx7a4yWmGdbb3 iZEIjpvKked0rP8RZP/u/5NYHDj1/KWna9GaG4hBbMgfw4FKJmnVJx/WVzOxW8KH Hg0ld+bZOD4L2IX2hXNZ8IlHHtZEgKIwfhaZyax6F/Um200D1KFWzSkENCUIeiP6 xDVHRRNTKA1MGm9DmZ19jPnaXZoB1xvxab2buCB1PJaGLei2H6UedV8hBzIWHy4o +GRsi8NObZ0QCohUzeG+2WH5EbMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTq0W/4 B7k+zuhS3QAfYaOQgSQQ/DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg3Nzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB/kAMA0GCSqGSIb3DQEBCwUAA4IBAQB4u8k8prJ3IHwB+X9z1UuxDArT KZZqN6OpaThRoY+ab0b+VN1wZO6UwzevURnaTSZHP76wp9b7WpLzdsMgyeFyDZMq rMD5QJgStoK421ZgyyvolCgJDT1L5pP9HG7bTsHlaRxYwZ3vhV0RAdeS7Urjud/F MtEwqBDCI3mfrLD91VGvW5ps5ajaPgzEjVDXo65oiEYvZ7CmpzsAlWiYTgX4/u3j eL4Kia+uSE4umwdlsrmt2/pWBwBzopL4xofBQVyoJhPRIfeig8+dKAppLKsQ0G2W hTQ6ixUdFvk8k0DPTLDHYIxk07kGnKFpcLTScMfQ25DPywso/LL/ds8KSqZ9 -----END CERTIFICATE-----Generated at Sun May 3 00:40:32 2026 by rpki-client